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DEVICE USING MONTGOMERY METHOD 

(57) Abstract: 

PROBLEM TO BE SOLVED: To provide a calculation 
device which simplifies the constitution of a product 
sum circuit and permits pipeline processing and uses a 
Montgomery algorithm to quickly perform multiplication 
remainder calculation. 

SOLUTION: A product sum circuit 21 multiplies outputs of 
an A register 3 and a B register 4 and adds outputs of a 
c3 register 26 and a Y register 5 to the multiplication 
result. A product sum circuit 22 multiplies outputs of 
an N register 7 and an m register 8 and adds outputs of 
a c4 register 29 and the product sum circuit 21 to the 
multiplication result. Registers 26 and 29 for carry in 
two product sum circuits 21 and 22 are provided 
independently of each other, and carry is returned to 
the .corresponding product sum circuit. All the 
processing is performed in a processing, unit (k bits). 
The next operation of the product sum circuit 21 can be 
performed during the operation of the product sum 
circuit 22. 
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tfyK£c3 UvX*26lcte*ftU T&32tf*;/ h£gT3 
«fDia»21 1 > m£fl**5fcafrOj|tJWgS32 
i^tbA-T*,, SS[°JS§32I4, m 3^fQlH]Sg21COttS* t 

tt32tf* h^ml/yx^N:ai*t5 e 

[0 0 7 3]" *4»»|5|B22I±. NbvX^7^b0A 
*no d:mbyX^8(Dl(t:^iSL, ?Oflt]tli*& 
*3»«Eltt2l3^6<Z)ai*i:tJB»-rft. ftfc\ 3 71 

X*29lz»|ft-r*o Tte32fcf* hf4ttfflLftl*o 
[00 7 4] (zaTfflS) B8lt i ^rtffi«l3lT* 

[0 0 7 5] *3»»|51K21I±. Al/i?Z*3, 
Bl/vX^4^b£0A^Jaj , 'bj£*XU ^CD^ 

IS*fcYuyx^5^6©A*iyi <t£;tajiu 

<7)1m&1£mt c3 UvX£26OM<h£j0ff-r£ o f L 
T\ tt*0>-ttt32e^ h^c3UvX^26lc^L. T 

&32t*^ h*«4«fDia»22^ai*-r*. 

[0 0 7 6] m4^fD[HlK22(i. N-Ui/X*73^ 
£><Z>A*Jnj tmj^yx* 8<Dtt£:$*jrU ^(D^ff 

«*^K3«lDiaB21^60Hi*i:tapJ|[L. MCi^O 
»Dj«S*«!:c4 UvX£29<Z><i<h£anSt-r& e fLt, 
<S*<D±fi32fc: h£ c4 UvX£29lzft#iU T1532 
tlV h£Y UvX* 5<Dy M iCttttT&o (7;U=f'J 
XA3) 0)Y = Y/r(O«l3l!i % i m § CD y 

[0 0 7 7] (DT»«&31) B9I4. =lTft«aS*ff5 
1fJ5£<D — ^J^^-Titfe^ 0 33(4c3 Ui/X$26(BHj* 

<tc4 u^x*29o>Hi*iaiRH»iia>a*ttin»-r" 

34liilDa:i5]K33AMba>^r J r 'J— tb^J^ o. 

[0 0 7 8] C<DaT«»31-eii. □7«I«7tO^ 
^'J-^Sftc3, c4 (OMOmm^-oXl^o c3 U 
vX£26, c4 UvX£29<DM&Z/Y UvX* 5**t>(D 
A*y32S"*DlHH]H33lzA*L : / -tOttlJHSIR* Y Uv 
5<7)y3llC£ii^L. ^«l31*fi"efc432e 
hOfltlZftftLTY UvX^f 50y32lcU3A , r*o - 
CTr, ft^frb^frA^cfc?^ y 320filli Y 
5^1432 If* KtLTftt>tLrLx*^ HJ8I4 1 f v h 
(7>fiS:efc&<DT% *DJCe*tt32t*-v h+*>'J — <7>S5S 

[0079] (aaiaiKoatfiS:) nnoii s ±&om&tm 
vmi^tz9ttm&o>mf£o— mzukTrnx* zzx 

*o »fDS.»li. 1 <l<D32tfy MH*»41±:. 4{I<D32 



tf-v h*nJHM2.' 43. 44, 45t^*r*o 
[00 8 0] A, B(Z>A*flH*32tf^ h*3HMlT?*W 
£*U ±tt32t*u/ h<kTfi32tS h <!:<£> 2 OT*fcti2)$*i 
*• 32 tf? h*DS^43(i. 32tf* hiH3IS41<7)fcb;bTte 
32f^ htA*RO>«.i:*»JtL. *<DttJ|[tt*fl!>Ui* 
32t^ h$32e-y h»J»45^ »J-£32 £y K*D 
K«42^-t*L-rtt£liA'r*o 32 If v MKJJHS42I4, 32tf 
? h*«*41(DUi*±1432e^ h£32tf-/ h*0S:^43O 
**'J—ai*fcStD«U -l-a)JBJWS*(3!)a*32lf y h 
*Z2Mv haDjt«44^titS*-r4o C(Z5JJD*T?I4**»J-- 

[00 8 1 ] 32.e* haQ$f:3§45ii. 32e* h*n«S43a> 
fcB*£A*ca>«i:£JiD*U *(7)ajt«jRa>tii*32e 
* hf4ft*DlsJB<£>L£iJ*) (Tfi32tf*h) tfty. 
U — 1432 tfy ha«*44-^ai*S4xS 0 32tfy httlllS 
4414. 32^* h*njt«42(0ai*t32t:'y Mn*8450>* 
■V U— &2j<h£ADSU ^CD*P^mcDtti^32t' > * KI4 

flfaiEi^cDHtb^i (±fi32t** h) <tft& c zomwix 
i4* >j — l ft l n z t tfmmwzmx s ttr i \ 

[008 2] ftfc\ *£0ja«flW£tt]M£K(4* /\- 
K^xTlcHb-T. ^«CD«f6SlJ«(0'>ft < t 

hOxTxmm-t&zt&xz. t(D^5^m^iz 

^-r>««*«prfBft32e* K^n-tr^^T'H^Lfr 
[0 0 8 3] 

^tt(4. ^E>3> U^^fflLvf-^ffflJ^H-fflZOlST. 
ICft£ D 

[0 0 8 4] ^fc. m2^0^|Ccfctll4. **'J-ejft£ 
»«&31t RTffitft«a)-C. >W^9.-f >»«ft"i:lZj:-D 

[U®<D©mftl$e0^] 

[■1] ««ma)i|IXfH^tfffttB (fflAfl) CD1«^ 

CH2] WWBB(D«fiE.Blr*fc-6o 

[S3] *X«aj|iJtM*tt*»B a)iifP 

[H4] ^^Bjro^fffij^ltffStB (12^) o«tA 

[H5] ^BMomnm^tinmm imzmm) <on^ 
mwmx&& 0 
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(c4 . c3 ) r = c3 + c4 + 
y g -1 =c3 
y g -c4 
next j 

if Y^N then Y = Y-N 
Y < N then return Y 
[0 0 6 3] H4I4. ±&Lfc7;U:*yXA6(D:3Tffl 

3«»iUB21&i;S4aS]Is!K22t. mi t^-rtcDt 

$tlTOBUvX$4, I.3l/yX^Lt(DYUy 
X£s! B5l/5^$tLTfl>Nl/yA*7, S6L/V 
XJt-Ltfl>ml/y^#8atfBRBB11i, **'J— " 

[00 6 4] <cfc\ m3m%\®m'ij5ijsm4mft\9\&22 

CDI*jfflMStJ£l4, 12 ( a )■ iC^-rm 1 SfDlHlK 1 

SS101 fc2ktf^ hJraffgi02 t2ktr^ h»«*i03 i 

[0 0 6 5] K3»«EI»2ia>k tf-y m*«101 I*. 
AI/i/^$3XtfBl/i/X^4^b©aiAS*f L, 2k 
if ^ hfioj|:§£102 14. k fcf* hft*8101 Otb^tSW 
I3B11 (YL/vXn) CDfc±l*J<i:£fing:L. 2k t£ h JlD 
«*103 14. 2k tf v h*JDg:tl102 (Dfttit c3 UvX^ 

26£Dtt3^<t^*ns:-r^c fcfc. 02. (a) iz7f:-?mmm 
■ei4, *iws*i-»*?is]Bii (yuv^5) 

SfclzJiDjCU ^(7>&ICc3 uyx^26<7)tfcS*SttlX-r4 

6a>B». -t"a>*i-a«ia*ii (yuvx^s) otb* 
$ in*-r * cfc 5 izmtfi L r t g i*. 

[0 0 6 6] »*4»«ilslB22(Dk tf KRJHI10 

1 (4. N isV7s$ 7 Wml/yX^ 8^btf)fct!*>£^ 
Ls 2ktf^ h*P»l*102 14. k\fv h»IMS101 <Dtb2) 
£S3«ft®B2lfr&a>T&k tf-;/ h<7>tii* <h £Jra{l 
U 2ktf^ hiP»S103 (4. 2ktf? httlJt»102 CDfcb^J_ 
<hc4 UvX$29<DHJ*££*njrr£o ftfe. B2 

(a) ic*-r«*«-ett. JMt«*lc*3 8HDlSB2l^ 

bCDT&k tf V >CDas*jS-5fel-ftlJ(L. irC7>&|Cc4 U 
vX^29(7)tb^l^*D®-r^^ : 5lc^^ri^A^ C*x<t 
ttieic. 5t(3c4 U5/X*29<DU*}. ^<£>&lcm 3 ff*D 
®B21^&OTfik K(7)as**iD»"r4«fe5lw«fiE 

[0 0 6 7] H5I4. riU3"';XA6<7)=»7ffi31(Drt® 
^tKWit*5o K3»ffllslB21fil::-C\ AUvX 
£ 3CDi±i^a j (kt'^h) t BU^X* 4CDfchS^)bj 

(kt-;F) iJtSL, (2kt'^h) 
|~ gtRH!B11 (Ybv7^5) C7)th±l (kt*7h) £ 



c3 UvX$26(D{iJ*l (kt'^h) i^^S-T^c 
fc^ StREIB11l4. j Offit ot^aOSL.. j CD«3&<0 
■C*S«#l^l4J(S-3W»ISB21>^osai*L. jtf>fil*< 
0T*ftt>ii^lwl4m3 Y 5<D%»tty j 

0B21^m^-r^c E3S^Q[h1B21I4. f-G)3IJtfgX 
(2kfcfyS) fl)±tikevh$c3 L/^X£26^tti2J 
U -ttDTffikf^ H&*48HPBIB22^Ui*"r«o c 
3 UvX£26l4* C©k fc*? h**H©*Jtffi©**U 

[0 0 6 8] »4»ftEB22rtlCT. NUvX^7(Dffi 
*Jn j (kt*7h) iml/vX^8(Dai^m (kt*7 
h) fcSRJfU (2kt'^h) IZ S 13 

«*D[HlB21^t>CDT&k hth*^AQS:-r-&o i4g 
*Dls3B22l4. ^(£>H§:S£S (2kt^>h) Olttke-; 
h£c4 UvX^29^ a*L. -^-CDTfi k tf *v hjYU 
5^t±J^£o c4 U^X£29I4* CCDktf^h 

Ybv7^5ll ffl)ktf7h0)f->$«yM <tl 
[0 0 6 9] 0 6(4 v : E>3VU;ilCj:^)SSLSai*«Q31 

hi^fctNT. (7/^'JXA3) ^© 

31IZ^tc^o - j — :7<&«fflT?l4. Axbj ^tfrnxN 
(4. Axbj &«mx N(D*«fBKx*«S(Dft»S* 
— ^CD^aJT'(4a j x bj <tmxnj £CD«J#*#£fi- 

[0 0 7 0] «2«Wlcfcl+£Mfc£Att;«l:io 
^TK«t4c UlTO«T*l4: N, A. BCDtf-yhftt 
1024tfyK g=32. ^Sm<ik=32. R«2l024,- r 
= 232^-^^)0 

[ 0 0 7 1 ] (37S«1) 117 (4. 3 7TO*31tfT5 

*n' o L/S?X** 3214m 3 SWlHlB 

2 1 (d th x t u v x ^ 31 cd as * t % m mt z> sutBBt- s» 

[0 0 7 2] CCDz}T|tJ^ST'l4. □7«llt'(lfflt^ 
c3 UvX^26, c4 byX^29MmbvXn'M 
MfctffoTL^i. m3ffi^PDB21l4s A bvX 

^3, B Uy7^ 4*^6(0 A* ao , bj ^ill, * 
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A: (a g -f . a g -2 , aO ) fS^tSSl>y 

(bg-1 . bg-2 , — . bo ) g«*tS*2I/v^J 
"t LTOB UvX$ 4 m2WfO[H]£&2COBiJln)(7)T<i 

c1 S«»tS«4 £ LTOd UvX* 6 

PJ^O&N : (ng-1 . ng-2 . *" nQ ) 

^!7UvX^<i:LTa)c2 UvX£9£. 8 1 Hftlsl 
Bl CD-tfik tf hU3*, *2«fQ|HlK2CD±fik 

httA.;&tfc2 uvx^ 9(7>ai**»ijt-r-s+^ u— ft 
[0055] siswi, mzmmM&zo 

rt»i«SB2 (a) , (b) IZ**^-f 0 
81 (4. k h^ff^101 t2ktiy K»«ei02 <t2k 
tfy hira»Bl03 <h$Wr^ 0 k tf* hftJCSlOl 14. 
A UvX£ 3&tfB L/vX^ 4 *n £*»U 2k 
tf? 1-210^31102 (4. KBJW101 (7)£iJ2)£SiR 

BB11 (Yb5?X*5) (Z>ai*fc*iD*L. 2kery Hn . 
WS103 (4. 2kt^y h*DWS102 CDttJJchcl UvX* 
6<7)tt*i:SttI||:-r*o «J3. 12 (a) i^rmj*« 
Tftt. »JWS*l=a«BB11" (YUS;x4r5) <Dtti*>£ 

6 0>aiju -tCDSfclcBWlslBll (YUvX$5) <7)as* 
t mitt- 6*3 KltJS LttSL^ 0 

[0 0 5 6] Sa2fS*Q[s]B2l4,. NL/y^7 Wmb 

ftk tf v h(0tt*tllDJW-62ke^ h»DJtB202 ££*r 

[0 0 5 7] 113(4, 7;Ud*UXA5(&=JTffi3la)rte- 

£3<7>fcfc2)aj (ktf^h) 1/yX? 40tb*bj 

(ktr^h) ££B*U *<7>iH3M&£ <2kfcf^h) 
Y = 0 

for j = 0 to g — 1 

(c3 , tmp1)7;=^0 + aj • bj 
m=tmp1 • n' o mod r) 
(c4 , tmpD r =tmp1+m • no 

for i == 1 to g — 1 

( c 3 tmp1 ) r = y j + c 3 + aj 
( c 4 , y j-1 ) r =trap1 +m • n \ 

next i 



BKSBII (YL/yX^l Oft* (kt*7h) t 

ci" i>vx* eoasA (ktf^h) t^StSe 4 
fe\ BKHB11I*. j (DBio££ttttu jOffitfQ 
\t?fc*»*lwl4Bl «»I3B1 ^O^UJfrU j Ofiltf 
0T*ftLx»*IZ!4Y UyX^ 5«ly j SBl »W 

[5]SSi^£ii^-r^o B i 8f*QlHJ» i 14, ftDBBBX 
(2ktfyh) <D±f4k*f^ h^JiDlHslB10^aj*Ls 
fOTiikt^ h*B2«ftHiB2"^aj*r«. 

[00 5 8] B2»Wls]B2l*il::-C\ Nl/yX>7©B 
^3nj (kt'7h) tmL/yX$ 8(DttS* (kt*7 h) 
tS*»L, *r(DB««SB (2kf7h) lw, gl»5pD 

es&i ^e>a>ffl*Tttk tf^ htinjrr-*. B2B¥aii] 
B2I4. -ta>BJM6B (2kk*7h) (D±tek tfy h£ 
*Q*Is]B1(WiS2JU -tOT&k tr? h£Y UvX* 5 
^Hi*t4o YUvX£5l4. -ta>kd*y hOir— $r$- 
fllyj-1 tLTMt^o 

[0 0 5 9] JJD1TISB10I4. mi 8WDHIB1 s^&Odi* 

(k tf*> h). iB2aSilHlB2^e)(Dtb* (k fc:^ h) 
<hc2 US/X* 9*r>&<&aS2) (1t'7h) tSMt 
5. fit, *Ha>*JM3i:LT. (k + 

1 fcf*y h) £>±fiM tf y hjc2 UvX* 9^. ^COT 
fike^h^cl L/yXn^^W^)o#c1 b 
vX*6. J c2 UvX*9l4. Z*Lt»*f-6." 

[0 0 6 0] (j£2S§BJ) ^'J-ffl(3)l/yX^S#I 

fais]^sic^itfcm2^izotxTift0jr6o m2^Bj 
-CI4. ftaftsBizfeit^^rV';— m<o\sis**z&%i 
\zwfx aJtamaiBBi?*-* «»$R-r«*tr 

[006 1] (T;Urf'jXA6) §lt#-t£2&A, B, - 
/\°^*— £N' , • U*BB»YA««*Lt rBBlf, 
A= (ag-1 , ag-2 , an ) r . 

B= (bg-1 , bg-2-. bo ) r . 
N' = In' g-1 . n' g -2 . — , n' 0 ) r . 
Y= (yg , y g -l , ••, y 0 ) r . 
R~ r g , 
r =2k 

t&z>t>$ti* rBiffico— ^BBtmpK *tU-$» 

c3 , c4 <i:-r^ii^, SfelC^f i , j <7>« y jS L&W. 

iCcfcyABR-imod N&&m&xmmm<DttntLT* 

[006 2] 
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»¥«a>A*i£-r4*Wt**L. B1IIEm2^fa¥-IS:*<;1 
5tr. / ^ ?5 < >Mf ^ < L-fc - i ^ ^tttV 

[0 0 4 6] >)m\z&&mm.m 

&ttJEg»l*. »^10lcfci,N-C. «&S££ 1 SHOCKS 
[0 0 4 7] »*sii2ic«4* UjilwctS^n:*] 

t;« 2 »*d^s: i= fc it Ci*zt*ft*tr 
[0 0 4 8] i»*ai3ic««*>if> vmz&zmnmi 

tf«2S?0^Kli* 2-3© k fcfy h©»tftlt"f5>¥-8 

[oo49]n §&Bmmnm\mm!&mv\*. ft*m 

£±tt1 f ^ hfcTttk tf^ htl-»KtL.--t<7>T14k 
M*1 0©*^U— fcLT**«fcB«l=1 *3@© 

^faS^icML. fulfil t*'> hlitSioo^^'j 

tfc*Z4:lZj:y. 1 Og©*gft0S&©«J&©*»t£ 
[0 0 5 03 »2*M©*««l*ItJW61t-CI*. 2-3© 

Y = 0 

for j =0 to 

(tmp2, tmpD r 
m = tmp1 • n ' 0 

(tmp4, tmpl) r 

(c2 d ) r 
for i = 1 to 

(tmp2, tmpD r 

(tmp4, y j-i ) 

(c2 . cl ) r 
next i 

(c2 . d ) r 
y g-1 = c 1 

y g = c2 
next . j 
if YiN then Y = Y-N 
Y < N then return Y 
::t\ ( ) r i*^ S50LW© ritftl 

2 li rata l «7T«^LTL>^7b<. rtgtti tf*y H©fil 



i=*y. mi ^B^ti^^i^i -3g©ms3i5is©m^©# 

IBUTl^©"^ 2-3S©^*QlHl^©S)^4 3 l^. 1 *3g 
[00 5 1] 

[S§B-8©§ISS©ff2KS] **K*-t©j8«5©»ffi* 
(«1«Mfl) 1 Og©»ftlH]tt^©**U— £kfcf-;/ h 

icufcsi *B^iz-3tNTift0^*r«) O . m i f&wx'iz. i o 

§©ffifc3ls)£&©!±i2ji: 2 o g ©fffa[E)S§©as;*) £ ©flag 
e«-efc4 (k+1) tf.^ h04tU-J±fi1 t:^ h 

-t^tcl £ LT 1 oBCPBBDElSSlzRU -fr,© ±fe 1 

h at? i o^^u-tacj fcit" ^u- 

[00 5 2] "(7;Ui'JXA5) *ff-r^)2iaA. B. 

A= (a g -1 , ag-2 , aO ) r . 

B= (bg-1 . bg-2 . bo ) r . 

N ' = ( n ' g-1 , n' g-2 . "\ n' 0 ) r . 

Y= (y g , yg-1 , vO ) r - * 

R= r g , 

r = 2k 

£fc£>:fr£ft; rati fir©— B#£»tmp1. tmp2, tmp4. 

^t'J-fSci . c2tt4«*". i , j© 

tftyiSLfflSlc* y ABR-1mod N £*BH£ x iJLftfi© 
[0053] 



3 7«1 



3 



[0054] an*, laifcr;^' yXA5©37ffl 



g- 1 

= y 0 + a i ' b j 
mod r 

= tmp1 +m -no 
= tmp2+tmp4 
g-1 

= yj + d + a j ' bj 
r =tmp1 H-m ■ n j 
=tmp4+tmp2+ c2 

= (c2 , cl ) r + yg 



(7) 



ffHS^F 1 1-2 1 2456 



■r4*D*BlKi:. *»S*t*2«$«»rSJBi aw* 
2UvX$<h. «TlB«2aifDiatta>Tttk t> ht^ai* 
«»u frEK2»fni3K<7>'*(D5fea>iHia)Tfik t*^ h 

UJ**1Mfrr*JB3 L/vX^, -ffiEittlJHgJttCDTffi k 

a)*a>iHi(D±f4 1 tr ^ hUi**»tt-r^K7 uvx* t 
toes i stnsiKtt. toesi &1/S2 uvx 

»*frl\ TOE8s2«#nll]ttl4* UEUSI/^*!:* 

**Lfciii:£jii#u ^-(D^»s*izifrEmi»fPiHi» 

CDTttk t£v hUJ*£»*r4**£m\ TOEAdJUhJ 

bi*. «rE*i8ifpiatta)±ttkify htt»tt(rE»2 

8t»B*a>±ttk tf^y htBA£TOES7 US?X 

tin**- 4;^^^^t5 £ 5 lz«j«Lfcc fc e 

[0 0 3 7] H*«2(^«5^>aV gaiZck4*Jf« 

1 izfciNT. TOES 1 H*DEs]£& 
14. TOESl uyx^jc«»$*ifc2»0)BrS 
hfl)liS*»L, *<B*JH8*lzTOE«3 UvX^ 

[0 0 3 8] B|3)tflI.3lC«-6^ >=f^ UftlZj:«K]KM 
*fett*»1tl4* iCfcl^T. TOES1 WWEK . 

14, WE*iatf*2 U^*lz«*Stifc2»a>Hr* 
If* hGH!£ffe»L* *(D**e*lwiRrEK4 UvX$ 

iw«»$tLtflt$*Dif'L. *a>»jira*icmE*3 us? 

[0 0 3 9] IS*^4lZ«4 ; E>=lVj)ifZct4^S:*J 
(S25§Bj3) (4. ^>nVJ(7)T;u=fuXA 

fTi^a)ajHe*t±ttke^ KtTttke? k^ic^ 

»2»fPHBi:. ■"*»*tL«2ttt«l#-r*Ki ft vat 
2UvX*£. «rE*2SHDEIHj©Tttkt:y 
SSLs «TEai2 8WaigHKD*a>*a)HI<DTttk t*!V K 
HS*S*Hfrr4S3 US?x*fc* SUES i *ftIsIB<D± 

ffik tr? hus**«i#u frE*i»»a»<z>-ta>*(7> 



>CA-lz33l+4/^>-$rOffiS«}*-r4«6 UvX$ 

«TE!B2«aElBO±fak t*-v htt**«frU TO 
E»2W?DlHlttG>-€-(D5te0ia<7)±<ak fcf? htt**1ft» 
t4l7 US?x* TOES 1 8ffPHi»l4, TOE 

HMg2byX^ lz{£?# S tlfc 2 &CD fifr S tf ^ h CD 

tt£*J(U ^cDStWSSlzTOES 3 l/vx^l:ft}$$ 
*Lfcft<DBfr£t*^ h(Z>lt»tfTOESR4 UvX^CSSJ 

*itzm£bnwiTFz>mw-%m\ mmmzm^mt. to 

EJR5 uyx*lz«**nfctt(DBree^ hCDffitTOE 
*6 uyx*lz«»$*ifc«i: $JiJ|[L. *ft>SllttX 

r-mE«i waiaiBoTfik m* autoes 7 u 
vx * ttfcflt* inK-r *a»*fr cutis 

[0040] ai*ai5icflift^>=f> 'j;ii^j:4^epj 

*tt*K«tt. BI*fll4lzJ3L^r. TOES i BHEIII 
(4.' IU1E1 1 fttfS 2 UvX » lz«#aF*ifc 2 &CDRfr£ , 

tfs> ^t^tiL, -to>*»e*icmEiR3 us?x$ 
*i^«TE*4-us;x^ic«}*$tLfc«[SjDjt-r4cfe5(c 

[004 1] »*5t6IZ«4^>=fpt UjiiCct^^mpl 
*tHMS«l4. RsRSKicfcivc. TOES i ffiDEIK 
14. ilEf 1 Sl/S 2 bv^^ IcS^Stlfc 2&0)rItS 
f^KZ)(IS*lL, *a>*JK6*lcTOE»4UvX* 

i=«»$ftfcfc£in»u -toiBj«e*izwrEJB3uy 
[0042] n-#m7 izgk&^is^sjt tjm\z&&ms.m 

*ttJt3S«l4.'BI**4lztet\T.. TOEat2HHiB)-B 

(4. toess "us?^*fzflM»stLfc»fl!>Hf3Ee^ ham 
£toes6 i'Vx$\z&ft$titzm.tzm&L. *<Dm 

JKSRKTOES i SfaiHlBOT^k htb^^^DS: 
L. *<7)*n3i:»*iz«iES7 uyx*ic«*$tifc«t 

[0 0 4 3] lt^^8{r^4 : t>nV »J;ilZct4^SPJ 
*it«*««4, »*fl|.4(cfct^r. »TES2»«]I5IK 
14. TOES 5 U^*(c«***Lfc«©Hf36-f^ 
fcTOES-6uyx^lz«J»$tLfcSiti|j(L* ^CD^ 
»««I-TOES 7 US/X ttfc«**0KL. ^ 
(OmifillcffiffiS ifllWBIttflOTttk fcf^ htB*tlD 

[0 0 4 4] BI^9lz«S.^ Uif> 'J;i(Zcfc4^^SiJ 

^l+g:^mi4. IS^^4-8(7)jDjti^izfcLNr, TOES 
2»*p|H)BlzJ:43tK4»lc. TOESl WfPBWciy-f- 

[0 0 4 5] tt*ai0lc«4^ >3V 'J ££!::'£ «ffc*M 



(6) 



ftBW 11-212456 



[0026] ::t\ ( ) r tt* SW*©rJt»i« 
fl)JEaSJMStLtft5-t£*ltl^So tmp3, 

yj 0>b$* Ui**<y'i-1 l^tttt^HSCOli, 7^I/3'J 
XA3 icfelt* Y = Y/ r 0>1MS£ CtLl:: «fc y HSLT 

fflg* i ;u— ^cD*St?y * x t> j :to«fry*"e£a 
[0 0 2 7] H1 11*. ±4Lfc7J^ , JXA4fl)a7« 

a**fr-r*iii««i*tnt*«a>*aH-cfc6. 011c: 
aasB5iai;isa«iia»52i:. tfti)-AoSA : 

Xag-1 , ag-2 . ao) SS^tSA l/vX^53 

S®-r^,-^O^B : (bg-1 , bg-2. 
bo ) B UvX*54£ s flJ^O;*N : (n 

g-1 . ng-2 , no ) £«M#-r*NUvX*55£. 
£»fQ[s]B52<Dasa<DTG:k fcf-^ K*tMM"*Y l/v7 

57 a^ft][H]^5lcDtb^CD±<i (k + 1) tf-y h»tf 

jS«ftias»52a)ffi*(Z)±iak tr? h^fturrs*-* u — 

it^aii: LTO*QS1h3K58<!:. i)Dlt[§IB58<DftJ»fi*£ 

£«#-t£XRis]B6p±: £<rr *> 0 

[0 0 2 8] *fc. ar»ffllHlB51. £-»WlslB52<Drt« 
*gjS£^12 (a) , (b) IZ****. fffSftlnlBSI . 
I*. AUi?X*53ai;BUyx*543^6><DHi***»t" 
Skfcf* h»JW»511 fc, kevHWWll (7>tt*J& 
Z/««EIB60 (YL/S/X*56) CDft* ^tttiCf S2k t* v 

htog:§§512 fc. 2kf^ hftUTS512 ©UAatfCl/i? 
X^59CDUJ*S*nir-r42k+ 1 try h»D*8513 
tl, 0 j8aa@B52I*. NUv**55&tfmUv:**57 
^60)tti*S»*-r*kf^h*«S521 t. kt'^h 
^ff§521 <Dffi*&i;araaiHlB51^t>a)Tfik tf^ h 

©as**m»-r42kev h»«»522 t5ft^. e 

[0O29] 013!*. 7^3'JXA40)37llI^^# 
Sff-rtftWB-ca&ft'. ffS»lElB51rtl::T\ AUyX$ 
53<D£ii*)aj (k.tfvh) fcBUv^"*540)Ul*b 
j (ktfvK) t**»L. *a>«UMS*-(2klf« 

h) S^[°1B60 (YL/yX^56) (7)tti* (kt*7 

h) tcuyx*59(oas* (k + it'rh) t^ijnSt* 
So &fc\ S^[°1B60I*. j ofiict otttttfcU j 
tt*<0Tfc4*6-lCl*araiQlHlB51^0*US*L. JO 
fflA<0-Cftl^»^lwl*Y UvX£56(7>»iftfiIy j £c*a 
fPHBSWHS cflfftdlBSIl*. -t-<Z>3tJKSS 

(2 k+ 1 t'v h) <D±ik (k + 1.) fcf ? h^^DgllHlB 
58^tiJ*)L. *ODTttk ht£»»EB52^tt*-r 

So 



[0 0 3 0] £SSlI3B52rtl::t. N Uv*$55(Bfcii;*3 
nj (kt*7h) tmUS/X*57(Dai* (klf^h) t 
SStSU *.<&*JW6* (2kt*7h) daftftJlalBSI 
**&a>Tttk fcf? hfcfc2j£*D$rf S„ £f§*Q[IlB52l*. 
-tcDSIJWS* (2kt'^h) o±fik tf? K^iQ^lHlB 
58^fcfc*)L. *0>Tttk £^ Y US/*$56-^HS»*" 
So YUvX£56l*. ^<&k tf*y hO>7 r --$£ffly M 

[O O 3 1 ] AUtBIB58l2. arWHEIB51fr&G>tt;f3 
(k+1t'7h) t5WfDEIB52^&a)U* lk\2v 
h) ££«UtU -tottiWte* (k + i \iv h) 6 c.u 



^(DjMrjj— (k + D e^htfty. ^otc 

toff«?PlaJB51(7>ffi»3b< (2 k+ 1 ) fvhifeoTL 
*oTfcy. loaa>«WIalB (afgfQl§JB5i) <7>*gj£ 

[0 0 3 3] ^-vU--ltSaiT?fcSiDfflHlB58l=: 
fcl*T\ 5fcI§13M«ia>** U— *<2O0)df8tft!HlB5ia 

i;/ssaniB52r*o>ii»:^sirS^i^-cti-s:$ttSfc 
A. 2o@cofl*a[HlB ( )8 »*pislB52) r*a>sm:A<»7 
Lftlt+Ll*. ^ma>l ogc&fSSHUB <a«»ll!B51) 

S^fcSo 

[0 0 3 4] **MI*»r^*»«lcB^.rft$*tfctia> 
trfcy. 1 oB(7>»ftl3B-^a>*lHl3t«ffl(D*^ 'J — * 

k Hc-f scti^y . afoniB(7>ts^^*iS36it-r 

Sd<i:A<^^. *tc. dftdcfcy DS P (Digital Sign 
ai Processor) . ^ P3 > h P — ?*(7)±(Z>V37 h 
Oi7(!: LTHaA^SI^^^^ 'Jjiir^S^g 

[0 0 3 5] *«KOlfe(DBWI*. ^r-V'J— OeHRSft 
»ailHlBT*(D;U-^l3ff $xSCtlCcty . 20CDffi 
SlSB-ea>3l»^aitLTfirS.. o*>J. 2 0@CDa^Q 

[HiBT'CDS^a^^ToTu^srB^ici oicoaaisiB-e^isi 
s^e >=r> u &\z& zmm-mmmginzm&T i z t 

\z. fo So 
[0 0 3 6] 

[^S^SI^-TStc^CO^iS] R3R3I1 IC^S^E>3V 
UjilCcfcSSSfiJ^ltffSS (fltifBR) I*. ^>p> 

&k h^iz^itriis^'rsmi a^sBi:. a^n>n 



(5) 
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So ±K<D7;u=f 'JXAlcfclvT, A*T{*0^T<R 5 fc^tf^AfrT fcl^cR2 mod N fc OWCWtfR E D C 

• NSafctd-CfeS^ m^<DRS AatST'li, A* Sfr^CtKcfcy. A B R~1mod Nj*i()SCtA<tf 

T*<g»A, B (0<A, B < N ) O^ffSST'fcSC 6 0 

i:3!)^LN e «*-0>i§£\ ISA, BCD^fft^MSJESSfe [00 2 3] (REDC0*«Jt"x#f|tg«ia-^o>lt 

\zm y &Ltm-tz>t . m y m l tt *«wic j: « □ x*< mis x m*iJt<7>iti?ai#£ $ & izmsut x jMRsatt 

2(g|:^otL*5o fK»j:REPC fc£ Eh= Kt«**^-tfTff *6«fc dttaV*. COii^r. ax 

3£^fo . «cy. ±^«^<t^«ic2o(7>^a:^sij>5?icjsysL 

[00 2 1 ] (7;U=TUXA3) REDCmMM tHW*i:, Wk y X LttJIMW:: £ i> DXtf 2.eiC3& o 

»«^^tta Lfc7;i/ J 'J R E D C (A x B ) . I*;* TL^5o 2 OCDSIJf £I^-(D«£ tj £ L;U-^ 

A= (ag-t , a g -2 . a() ) r . 7W»jXA4^t B 

B= (bg-1 , bg-2 , — . bo ) r. [0 02 4] (7;U3'JXA4) REDC^figxf 

N' = (n' g-1 , n' g _2 . n' 0 > r . *J£^fifc5£ L7c7;U=f *) XAR E D C (A x B ) (£#fC 

Y= (y g , y g -i . y0 ) r . cfc?fCfc:£o ift^2»A, B, £ 

R=rg ' N' 'ttrtfflfcttY. ^'J- ^»C3&<<5rtl* rita 

r=2 k T% 

irfeb^^^L^ii^. ^Iw^-r j =0~g- 1 &mV& A = (a g -i , a g -2 . — , aQ ) r . 

LfflWCfcy. ABR-1mod N££Sffl£xitMfJftf>ft . B= (b g -i , b g -2 , bo ) r . 

»tLt*»4Zt^*4o N ' = (n' g -1 n' g _ 2 . -/ n ' 0 ) r 

[0022] Y = 0 Y= (yg., yg-1,"-. VO ) r . 

for j = 0 to g - 1 c = ( c 1 , c 0 ) r . 

Y = Y + A • bj R= rg , 
m = y 0 ' n ' 0 m °d r r = 2 k 

Y = Y -hm • N <tfct>fc>£*U r ill fixO)— BfSatmpl. tmp2. tmp3. 

Y = Y/r tapAtT i . j CDMySLASlc^y 
next ABR-lmod N$*»Kx»ftita)WK-C3R*>*Ct3W 
if Y>N then y = Y-N "e^^ e 

Y < N then return Y - [0 0 2 5] 
CO«fc5tLt»«)*l*ABR-1niod Nt\ ±aifc.c): 

Y = 0 

- for j = O to g — 1 . 

(tmp2. tmpD r = yo + aj • bj 
m=tmp1 • n ' o rood r ^ 

(tmp4, tmpl) r =tmp1+m- no ^7ffi9&M 

(ci , co ) r =tmp2+tmp4 

for i = 0 to g-1 

(tmp3, tmp2, tmpt) r = y i + ( ci , cq ) r + a i • b j 

(tmp4, y j-1 ) r =tmp1+m • n j ^7^1 

(ci , co ) r =tmp4+ (tmp3. tmp2) r 

next i 

( c i , co ) r = ( c 1 , cq ) r +yg 

y g-1 = co zir'ik&m 

y g = c i 

next j 

if Y^N then Y = Y - N titJE&M 

Y < N then return Y ' 
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[0010] temmm^otpT', ssits^^t^ 

#1977^1:: 'J ^xX h (Rivest) , v-V^T (Shamir) 
&tfx^ K;i^> (Adlman) <D = X\z£r>Xf£W-£titz 
RSADtftfc^o Z(DRS ABf#0)S*JE^Ii^^cfc 

[0 0 1 1 ] {RSA(^)S$7^5UXA)Bg^g 
(e. N) tn^^^m (d, N) ^Clfc^T. e 

at^?-Ccb-r^<i:. Bt^bE<i:^D<tCDT;ur3 'J X 

C= E (M) = M e mod N 
M= D ( C ) = C d mod N 

d • e = 1mod LCM f (p— 1) , (q- 

1) ) 

N=p ' q 

LCM : H'j^foSfc (lowest common multiple) 
p. q l£^#ft^£fe 

[0 0 12] e, d. M, N ft E 1*1024 1£ y hf§ 

mcox£um®itfmi^**iTi\z><Dv. saltan-*;* 

^ffi^Ltt 1 [HlCDRS AMW-X^ISOOtBim&CD&M 

ttJU*. §W*t— ^;u*3t. ^>=»vuot;u 

J: 5 ft. RSA»*Ztta**L4^BB«Bt*^*<T 

[0013] cco*J*3tJKDS55S^b*S8«-r«>-*aT. 

(^E >d"> ij(D7;i/i'JXA) ^>=f> UCDT^nUX 
Ali. fiJi&O&N (N>1) 4:. «^<P&N fcSLM::* 
"Cfo^^SfeR (R>N) ftSltaT^b 
TR-1mod N totmtfi lHk Rl^£ EftggWCTr ^ 

^T^J^i'JXAtfe^e ::t\ N , N ' , R , R 

-1a«TI«»t?fey. ^PJ^I&TliO<T<R • N. 

R-iii«*05aNa>±-c?a>*aRa>i£»-e*y. r ■ r 

-1-N • N' =1 (0^R-1<N, 0<N' < R) (DM 

[0 0 14] II:, Z CP^& Ri:2 CD^ftaS jggl L 
fc**. »»RK'**>»**v? b*ftl~«#»S.*- 
i*<T?££>fctf>* T^TR-1mod N<0ttIM>iKiiffl3# 

mod NOTWJXAREDC (T) fil, 7 

;Ud> 'J XA 1 iZfcl^T (T+m- N ) / Rl*j&-f» U J « 

[0 0 15] (7^3UXA1) T — ► T R~1mod NOT 
;^|JXAY = REDC (T) i£2l<D& O life S>*3$ ft 

& o 



M = (Tmod R) ■ N ' mod R 

Y = (T+M • N) /R 

if Y^N then Y = Y — N 

Y < N then return Y 

[0 0 16] 1 [5] CD R E.DCtli, ffJ^Tmod N-Cl$ft 
<TR-1mod NA<3RA&*LSt£l+Tfe*p #J£ 
Tmod N£3fc<fc£fc#>l:il£. ^l-^tct^CREDC 

(T) <t^<fc:£toTfcl^::R 2 mod N^CD^T'. StfR 
EDCfcfrSJiftl^o 

REDC (RE DlC .XXX^i_jUR2jnP(LN. 1 JL 
= (TR-^mod N) • (r2 mod N) • R~1mod N 
= T R-1 • R2 ■ R-1mod N 
= Tmod__ bL 

Z<D£5\zLX. flJ^Tmod Nj^tft^Ct 36^t?#So 
[0 0 17] (REDCa>^m»Sf+*^^Sfe55) « 

SS^lCOl^T* RED Cfl57;i/3" U XA$Jt»t4o 
fMtflOSSN. ■SttR^»KfRJKTfc%««. RED CCD 
(Tmod R) • N' &tfM ■ N(7)tt»±. ^MUg*^ 
KRJtcDffiSifty* iH.fflO)tHMl-ett#*lz**«i:« 
il^ftlKBii^StSS. *ZX. Z£>aJ#£^ 

XA2^t c 
[0 0 18] (7|I/3'JXA2) REDC££S*t£^ 
L fc 7 ;u 3 U X A l£ Sfe I ^^"^ £ 5 1= ft o SPJ^Sfc 
T, *N' , tt*fflK«Y*<fir*tt rifcR-C. 

T= (t2g-1.. t2g-2. to ) r . 

N ' = ( n ' g-1 . n' g-2 . "\ n' 0 ) r • 

Y= (y g , y g-1 . y 0 ) r . 

R= r E . 

r = 2k 

th^ztizm-s. ^cftj =o- g -i <Dm i )& 

LfflSI-J: y T R-1 m0 dN-££MI]gx»ttai: 

(HE* /Mt***mflL 'h^i?^^lflIt(Dffi 

[0 0 19] Y = T 
for j = O to g — 1 
m = y 0 " n ' 0 m °d r 
Y= Y+m ' N 

Y = Y/ r 
next 

if Y^N then Y = Y - N 

Y < N then return Y 

Z(D^v\z LT^t^tl^ T R-1mod N«t. ±i$Lfc<fc^ 
|Z^&3RtoTfcL>fcR2 mod NdrCDSt'Il/RE OC^ . 
frdCctlz^ y . TR-1mod N ^ ^<S6i> Z t ifitti &<> 
[0 0 2 0] (RED CCP£Sfeg ^ga^ fl>ffi55) 

REDC07;i/i y XA^^S:pJ^;H^lz8£5fi-r 
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aiw*4*ii:«i3fcttjt*fT5««(ztei%r. jR*9l*&' 
«ft^Sa>A*<k*6«jSS*rU TOES 2 

A^^-r^^^lcLfcit^rii 0ES<7>^>zf>> yft- 
[RaRqi i 2 ] mBX i 2 ftfo^Rlc 

13] VTEft 1 *g*D3M£&tfm 2 fltft^ft 
[000 1] 

»<DRS'ABt#»31(CteL^T. ^>=f> 'J 0>7 'J X 
A (Modulo Multiplication Without Trial Division, 
Peter L Montgomery. Mathematics of Computation, V 
olume 44, Number 170, April 1985 pp. 519-528 # 

[0 0 0 2] 

[0 0 0 3] ^ti&(DB!ilz»L-CBt#lt»BSJCfflLfc 

s> * in % eEEi=a l fc ^imm****< a& * 

[0 0 0 4] BM4t*Stl*. **J**<fc«*«8fr*3S£ 



if &^T9^^-e^^ 0 inft, »eenreK-ei** 
[0005] 'AMmm^mz. si«*3&<^bh$4xtl^ 
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